Vulnerabilities > Trilexnet > Letodms

DATE CVE VULNERABILITY TITLE RISK
2019-11-13 CVE-2012-4385 Cross-Site Request Forgery (CSRF) vulnerability in multiple products
letodms 3.3.6 has CSRF via change password
4.3
2019-11-13 CVE-2012-4384 Cross-site Scripting vulnerability in multiple products
letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar
4.3